$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/3804b9ed-e081-3a86-97c7-15444867c326.roa File: 3804b9ed-e081-3a86-97c7-15444867c326.roa (raw, json) Hash identifier: NtbAKNoI+q/Q71eh2H6jYn224xZDZv7f71KcqgzjNXc= Subject key identifier: 9A:0E:BA:68:FC:83:2F:79:1A:47:AE:B5:56:9C:0E:63:DC:4C:3E:BE Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584865303F06E668026EDF3E31B0 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/3804b9ed-e081-3a86-97c7-15444867c326.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 396982 IP address blocks: 162.244.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:3f:06:e6:68:02:6e:df:3e:31:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=677f6d14-d2a8-438a-b0e2-39a9bef12a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:f8:e2:02:0c:c6:33:ed:e3:56:3c:f6:d7: fa:4b:d0:e6:46:9f:3a:42:68:d8:40:44:ed:27:fb: 1b:bf:f7:0b:60:c7:dc:05:0b:8b:61:be:2a:a7:1f: 93:7f:ea:db:b4:af:b0:8f:24:ce:d2:4a:a3:05:e9: ff:d2:d5:01:8d:f9:64:20:8f:1d:a5:25:36:02:4b: 28:ac:d3:f6:a2:8e:9f:3a:62:8f:70:05:8a:42:1e: 14:20:b9:27:f4:9f:18:2e:76:1d:69:ea:ce:3b:fd: 53:64:31:e3:3c:62:4b:f9:bc:27:45:a4:49:33:73: 82:42:fe:e3:d1:d7:81:bc:10:b7:af:4a:c5:e4:28: 58:0b:63:16:bd:2e:5d:5b:cf:ae:c2:3a:c5:77:46: 02:58:94:d7:0b:f3:e5:be:2b:22:a3:2c:a5:2b:04: e9:1f:b9:c0:ec:86:38:64:2e:d2:71:8b:9c:1b:91: a3:d5:aa:58:43:17:59:30:74:98:23:10:72:f1:8f: d9:92:49:b1:ed:8a:76:ea:09:6e:b8:42:cc:4a:29: 38:97:d8:32:eb:ff:17:dc:16:68:54:35:4d:2b:f7: 7f:79:61:71:b3:f2:27:5f:03:6e:fa:3d:a4:dc:02: 23:7f:f5:4e:ac:69:f2:9c:96:6d:90:3f:ca:ba:35: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0E:BA:68:FC:83:2F:79:1A:47:AE:B5:56:9C:0E:63:DC:4C:3E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/3804b9ed-e081-3a86-97c7-15444867c326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 162.244.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:86:ed:ba:71:a3:07:d8:f3:8d:6f:0e:a6:5a:c2:49:14:0c: dd:fc:45:ba:5a:d3:33:7f:cc:46:69:5b:8b:53:44:75:76:c4: e9:cd:41:3f:90:62:05:77:4e:a2:90:2a:fd:64:c9:1f:61:e1: bc:2b:fb:7f:8d:6d:03:5e:d3:b5:f7:aa:0c:3b:dc:65:38:15: b5:59:b8:b6:87:a2:d3:53:71:8a:83:96:2a:41:cf:6b:87:c5: af:7c:ed:2a:29:d8:8e:1a:e5:a7:99:1e:5d:e9:49:7c:07:dd: 2f:29:a3:0e:b8:f0:b4:b1:11:59:10:c8:af:bf:ea:95:97:92: 36:90:1b:e0:5b:26:28:07:c2:f7:61:5f:cd:04:85:bb:94:3b: 10:53:52:43:1e:a9:c0:b2:ba:42:77:e3:77:74:b0:0a:b5:3c: 4e:39:db:da:e7:8a:06:9a:dc:cf:b4:0e:17:0f:db:be:f2:87: 90:12:91:87:d0:99:4a:17:5d:86:8b:97:7d:fa:f6:04:a5:54: 75:25:f8:9d:d3:72:d7:86:5e:6e:70:6e:20:e4:30:8f:fa:6e: a8:61:02:77:44:29:21:2a:b4:d3:8a:95:6b:a7:7e:63:41:1e: 82:9a:b5:ae:4d:e7:d6:0a:0d:46:2d:79:29:98:12:5f:ee:e8: 42:54:ef:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMD8G5mgCbt8+MbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk Njc3ZjZkMTQtZDJhOC00MzhhLWIwZTItMzlhOWJlZjEyYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCb44gIMxjPt41Y89tf6S9DmRp86QmjYQETt J/sbv/cLYMfcBQuLYb4qpx+Tf+rbtK+wjyTO0kqjBen/0tUBjflkII8dpSU2Akso rNP2oo6fOmKPcAWKQh4UILkn9J8YLnYdaerOO/1TZDHjPGJL+bwnRaRJM3OCQv7j 0deBvBC3r0rF5ChYC2MWvS5dW8+uwjrFd0YCWJTXC/PlvisioyylKwTpH7nA7IY4 ZC7ScYucG5Gj1apYQxdZMHSYIxBy8Y/Zkkmx7Yp26gluuELMSik4l9gy6/8X3BZo VDVNK/d/eWFxs/InXwNu+j2k3AIjf/VOrGnynJZtkD/KujXIYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoOumj8gy95GkeutVacDmPcTD6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMzgwNGI5ZWQtZTA4MS0z YTg2LTk3YzctMTU0NDQ4NjdjMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGG7bpxowfY841vDqZawkkUDN38Rbpa0zN/zEZpW4tTRHV2xOnNQT+Q YgV3TqKQKv1kyR9h4bwr+3+NbQNe07X3qgw73GU4FbVZuLaHotNTcYqDlipBz2uH xa987Sop2I4a5aeZHl3pSXwH3S8pow648LSxEVkQyK+/6pWXkjaQG+BbJigHwvdh X80EhbuUOxBTUkMeqcCyukJ343d0sAq1PE4529rnigaa3M+0DhcP277yh5ASkYfQ mUoXXYaLl3369gSlVHUl+J3TcteGXm5wbiDkMI/6bqhhAndEKSEqtNOKlWunfmNB HoKata5N59YKDUYteSmYEl/u6EJU73o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:16 2025 by rpki-client